Privacy Policy

rinKo is the data controller for personal data we collect about you when you sign up to or use our platform. Contact us at privacy@rinko.co.uk.

Account data: name, email, password (hashed), phone number, business name, and the chosen template.

Billing data: payment method tokens (held by Stripe — we never see your card number), invoice history, billing address.

Usage data: which pages you visit in your dashboard, when you log in, what changes you make to your site config.

Site visitor data: when visitors browse a site you publish on rinKo, we may collect their IP, browser, and pages viewed for analytics — this data is held for you under your instructions.

• To provide the rinKo platform and run your site
• To process payments and prevent fraud
• To send transactional emails (welcome, password reset, billing notices)
• To respond to support requests
• To improve the platform (anonymised aggregate analytics)
• To comply with legal obligations

We do not sell your data. We do not use your data for advertising. We do not share it with third parties except processors who help us run the service (Stripe for billing, Brevo for email, our hosting provider).

We process your data on the basis of contract performance (delivering the service you signed up for), legitimate interest (security, fraud prevention), and legal obligation (tax records).

Account data: while your account is active, plus 30 days after deletion for backup purposes.

Billing records: 7 years (legal requirement for tax records).

Server logs: 90 days.

You have the right to:

• Access — request a copy of your data (use the Export button in your dashboard)
• Rectify — correct inaccurate data
• Erase — request deletion of your account and data
• Restrict processing in certain circumstances
• Port your data to another service (we provide JSON exports)
• Object to processing based on legitimate interests
• Lodge a complaint with the ICO (ico.org.uk, 0303 123 1113)

We use essential cookies for authentication and session management (rk_token, rk_tenantId). Optional analytics cookies require your consent via the cookie banner.

Our servers and primary processors (Stripe, Brevo) are located in the UK and EEA. Where data is processed outside the UK, we rely on UK adequacy decisions or Standard Contractual Clauses.

We will email you at least 30 days before any material change to this policy.

Privacy questions: privacy@rinko.co.uk